CVE Database

Structured vulnerability intelligence: severity, affected software, and remediation. Showing the most recent 50 — browse older records with pagination or search the full set in the Intelligence Portal.

• CVE-2021-44228 CRITICAL — CVE-2021-44228: Apache Log4j2 Remote Code Execution (Log4Shell)
• CVE-2017-0144 CRITICAL — CVE-2017-0144: Microsoft Windows SMB Remote Code Execution (EternalBlue)
• CVE-1999-0002 UNKNOWN — CVE-1999-0002: Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.
• CVE-1999-0003 UNKNOWN — CVE-1999-0003: Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).
• CVE-1999-0004 UNKNOWN — CVE-1999-0004: MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook.
• CVE-1999-0005 UNKNOWN — CVE-1999-0005: Arbitrary command execution via IMAP buffer overflow in authenticate command.
• CVE-1999-0006 UNKNOWN — CVE-1999-0006: Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long
• CVE-1999-0007 UNKNOWN — CVE-1999-0007: Information from SSL-encrypted sessions via PKCS #1.
• CVE-1999-0008 UNKNOWN — CVE-1999-0008: Buffer overflow in NIS+, in Sun's rpc.nisd program.
• CVE-1999-0001 UNKNOWN — CVE-1999-0001: ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) vi
• CVE-1999-0009 UNKNOWN — CVE-1999-0009: Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
• CVE-1999-0010 UNKNOWN — CVE-1999-0010: Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.
• CVE-1999-0011 UNKNOWN — CVE-1999-0011: Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.
• CVE-1999-0012 UNKNOWN — CVE-1999-0012: Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file n
• CVE-1999-0013 UNKNOWN — CVE-1999-0013: Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belongin
• CVE-1999-0014 UNKNOWN — CVE-1999-0014: Unauthorized privileged access or denial of service via dtappgather program in CDE.
• CVE-1999-0015 UNKNOWN — CVE-1999-0015: Teardrop IP denial of service.
• CVE-1999-0016 UNKNOWN — CVE-1999-0016: Land IP denial of service.
• CVE-1999-0017 UNKNOWN — CVE-1999-0017: FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
• CVE-1999-0018 UNKNOWN — CVE-1999-0018: Buffer overflow in statd allows root privileges.
• CVE-1999-0019 UNKNOWN — CVE-1999-0019: Delete or create a file via rpc.statd, due to invalid information.
• CVE-1999-0020 UNKNOWN — CVE-1999-0020: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0032. Reason: This candidate is a duplicate of
• CVE-1999-0021 UNKNOWN — CVE-1999-0021: Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program.
• CVE-1999-0024 UNKNOWN — CVE-1999-0024: DNS cache poisoning via BIND, by predictable query IDs.
• CVE-1999-0023 UNKNOWN — CVE-1999-0023: Local user gains root privileges via buffer overflow in rdist, via lookup() function.
• CVE-1999-0025 UNKNOWN — CVE-1999-0025: root privileges via buffer overflow in df command on SGI IRIX systems.
• CVE-1999-0026 UNKNOWN — CVE-1999-0026: root privileges via buffer overflow in pset command on SGI IRIX systems.
• CVE-1999-0022 UNKNOWN — CVE-1999-0022: Local user gains root privileges via buffer overflow in rdist, via expstr() function.
• CVE-1999-0027 UNKNOWN — CVE-1999-0027: root privileges via buffer overflow in eject command on SGI IRIX systems.
• CVE-1999-0028 UNKNOWN — CVE-1999-0028: root privileges via buffer overflow in login/scheme command on SGI IRIX systems.
• CVE-1999-0029 UNKNOWN — CVE-1999-0029: root privileges via buffer overflow in ordist command on SGI IRIX systems.
• CVE-1999-0030 UNKNOWN — CVE-1999-0030: root privileges via buffer overflow in xlock command on SGI IRIX systems.
• CVE-1999-0031 UNKNOWN — CVE-1999-0031: JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's
• CVE-1999-0032 UNKNOWN — CVE-1999-0032: Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as ro
• CVE-1999-0034 UNKNOWN — CVE-1999-0034: Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.
• CVE-1999-0033 UNKNOWN — CVE-1999-0033: Command execution in Sun systems via buffer overflow in the at program.
• CVE-1999-0036 UNKNOWN — CVE-1999-0036: IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.
• CVE-1999-0037 UNKNOWN — CVE-1999-0037: Arbitrary command execution via metamail package using message headers, when user processes attacker's message using met
• CVE-1999-0035 UNKNOWN — CVE-1999-0035: Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.
• CVE-1999-0038 UNKNOWN — CVE-1999-0038: Buffer overflow in xlock program allows local users to execute commands as root.
• CVE-1999-0039 UNKNOWN — CVE-1999-0039: webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharac
• CVE-1999-0040 UNKNOWN — CVE-1999-0040: Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
• CVE-1999-0042 UNKNOWN — CVE-1999-0042: Buffer overflow in University of Washington's implementation of IMAP and POP servers.
• CVE-1999-0043 UNKNOWN — CVE-1999-0043: Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and othe
• CVE-1999-0044 UNKNOWN — CVE-1999-0044: fsdump command in IRIX allows local users to obtain root access by modifying sensitive files.
• CVE-1999-0045 UNKNOWN — CVE-1999-0045: List of arbitrary files on Web host via nph-test-cgi script.
• CVE-1999-0046 UNKNOWN — CVE-1999-0046: Buffer overflow of rlogin program using TERM environmental variable.
• CVE-1999-0047 UNKNOWN — CVE-1999-0047: MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.
• CVE-1999-0048 UNKNOWN — CVE-1999-0048: Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.
• CVE-1999-0049 UNKNOWN — CVE-1999-0049: Csetup under IRIX allows arbitrary file creation or overwriting.